Android - Intercepting Network Communications
We need a bit more than just a proxy and a neat interception tool like Burp Suite in order to inspect the traffic of some android applications. Let’s …
Posts
Mobile Application Security Considerations
I think that because mobile application testing is somewhat of a niche, the security considerations for mobile devices are also less understood. Not …
Android CTF - HTB Pinned
This is an easy-difficulty mobile challenge - and here is the description: This app has stored my credentials and I can only login automatically. I …
Command Injection - More Techniques
We’ve already learned a decent amount about of introductory information about OS command injection when we were studying for the Burp Suite Certified …
PNPT Course & Exam Review
This blog post is meant to provide a value assessment and a review of my experience going through the course material and taking the PNPT exam. The …
Analysis - HTB
As always we start with a port scan: The first thing that catches my eye is analysis.htb being used for LDAP and we can add it to our /etc/hosts file …
IPv6 MITM & Passback Attacks
Another internal attack vector we should keep in mind has to do with IPv6 and how it is configured with DHCP. Most of the time in enterprise networks …
LLMNR Poisoning & SMB Relay Attacks
LLMNR (Link-Local Multicast Name Resolution) is one of multiple local host resolution protocols. These protocols are based on the DNS packet format …
Felonious Forums - HTB Web Challenge
In this challenge we are greeted with a web page: Let’s go ahead and make an account and very quickly we can observe that we are able to make and post …
Burp Suite Certified Practitioner Exam Review
To preface this post, I want to briefly describe my level of experience to help others who might take this exam better benchmark how long it might …
Prototype Pollution - Applied Review
This type of vulnerability allows attackers to add arbitrary properties to global object prototypes that can be inherited by user-defined objects. …
Crafty - HTB
We run a port scan and see that something is running on port 80: If we visit the site, at first it prompts us to add the hostname crafty.htb, so we …